Quantum Measurements Cannot be Proved to be Random 



Caroline Rogers 

We show that it is impossible to prove that the outcome of a quantum measurement is random. 
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INTRODUCTION 

The postulates of quantum mechanics say that when 
a measurement is made on a quantum state the outcome 
of the measurement is random In classical physics, 
if the state of a closed system is known, then the state 
of that system is completely predictable. As far as we 
know, randomness only exists in quantum mechanics 
2j. Everett proposed a purely unitary quantum theory 
3] (without probability). However no known version of 
Everett's purely unitary quantum theory can account 
for the appearance of probabilities without extra ad hoc 
postulates (ij. The probabilities in quantum mechanics 
are thought to be caused by randomness In this 
letter we show that, given a sufficiently large sequence 
of experimental data, there is no proof that the data is 
random []§]. Thus it is actually impossible to prove that 
randomness exists in quantum mechanics. 

What is randomness? The outcomes of quantum mea- 
surements appear to be random so first we shall discuss 
how numbers can appear to be random when they are 
not random. 

Consider SHA-1, the Secure Hash Algorithm [f|. SHA- 
1 was designed by the National Security Agency of the 
United States for cryptographic purposes but can be used 
as a random number generator. A random number gen- 
erator does not actually generate random numbers [7|. 

Anyone who considers arithmetical meth- 
ods for producing random digits is, of course, 
in a state of sin. [von Neumann] [5j 

A random number generator is a deterministic algorithm 
which, given a particular seed, always produces the same 
sequence of "random" numbers. The sequence of num- 
bers generated by a random number generator is often 
called "random" because the sequence appears to be ran- 
dom. 

SHA-1 was designed to prevent even a supercomputer 
from finding the seed that generated a sequence of "ran- 
dom" numbers. SHA-1 was designed so that no one could 
find out that the sequence of "random" numbers gener- 
ated is not random without knowing the seed. The "ran- 
dom" numbers generated by SHA-1 appear to be random 
even though they are not random Q . 

Commercial organisations make quantum random 
number generators [9j which generate random numbers 
by measuring quantum states. It is widely believed 
that the numbers generated by a quantum random 



number generator are truly random [l[ . We are going to 
show that there can be no proof that a quantum ran- 
dom number generator generates truly random numbers. 
To do this, we still need to figure out what randomness is. 

The notion of randomness is not strict [5j- We cannot 
say that 1,000,000 is not a random number but 1,000,001 
is a random number. In statistics one cannot say that 
a hypothesis holds for certain so one says that one is 
e.g. 95% certain that a hypothesis holds. We can do the 
same for randomness and say that a sequence x\Xi ■ ■ - x n 
is c-random (rather than just random). To hnd out what 
precisely is c-random, we can look at what is not random. 

Suppose that a quantum random number generator 
generates a random sequence x = X\x-i . . . x n of n bits. 
Suppose that x is the first n digits of the binary expan- 
sion of 7r. If n is large we can be sure that x is not random 
and that the quantum random number generator is not 
generating random numbers. 

Suppose again that a quantum random number gener- 
ator generates a random sequence x — x\X2 ■ ■ - x n of n 
bits. Now suppose that there is a hidden deterministic 
algorithm A that gives the value of each bit xt of x. To 
keep things simple, suppose that all the measurements on 
the quantum state that generates x\X<z . . .x n are made si- 
multaneously. Assuming that all the measurements are 
made simultaneously makes A more powerful because A 
can see that the output is of length n even when the first 
bit x\ is being created. We make A more powerful be- 
cause we want to be sure when we say that a string x 
is very random that x has not been generated by a de- 
terministic algorithm. A is a deterministic but hidden 
algorithm that creates x on input n. 

Given a sufficient but finite amount of time, a com- 
puter program T can find A by looking for every possible 
algorithm B that could have created x on input n. Segre 
[1 01 ] has looked to see if there are such algorithms on a 
real computer. Some algorithms B might go round in 
circles and not halt, so to find A, T does the following 
steps. 

In the first step T runs all the algorithms B of length 
1 for 1 step on input n. In the second step, T runs all the 
algorithms B of length 2 for 1 step on input n and all the 
algorithms B of length 1 for 2 steps on input n. In the 
ith step, T runs all the algorithms of length i for 1 step 
on input n, all the algorithms of length i — 1 for 2 steps 
on input n, . . . and all the algorithms of length 1 for i 
steps on input n. Whenever T finds a new algorithm B 
which outputs x on input n, T prints out the algorithm 
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B. In this way, T will eventually print out A. 

If A has a very short description such as "x — 
X\X2 ■ ■ ■ x n and X{ is the ith binary digit of 7r", then x is 
not at all random. If x is truly random in the sense that 
x has been generated by a true random variable X with 
P(X = 0) = P(X = 1) = 1/2, then we would be very 
surprised if there is a simple deterministic algorithm A 
which given n describes x. This gives us our measure of 
c-randomness. 

We say that x = x\Xi . . . x n is 0-random when there 
is no deterministic algorithm A that describes x apart 
from x itself. If x is 0-random and n is large, then we 
can be sure that x is actually random and there is no 
hidden deterministic algorithm A that creates x. 

We now dehne c-randomness. Let us define C(x\l(x)) 
to be the length of the shortest algorithm A which out- 
puts the string x — x\Xi . . . x n given the length l(x) = n 
of x in bits as input. C(x\l(x)) is the length of the short- 
est description A of a string x — x\X2 ■ ■ - x n given the 
length l(x) of x as input. I.e. 

C(x\l(x)) = min 1(A) 

U(l(x),A)=x 

where U is a fixed universal programming language such 
as C or FORTRAN and U(l(x),A) = x means that the 
universal programming language outputs x on input l(x) 
and A. The quantity C(x\l(x)) is known as the Kol- 
mogorov complexity of x given l(x) [Tl - X4 1 . 

The randomness of a string x increases as the length 
of the shortest deterministic algorithm A which outputs 
x on input n increases, x is 0-random when the length 
of the shortest deterministic algorithm A which outputs 
x on input n has at least the same length as x. We can 
formally define c-randomness by defining So, the Martin- 
Lof reference universal test for randomness with respect 
to the uniform distribution L [5|, [15( : 

S (x\L) = l(x) - C{x\l(x)) - 1 . 

The randomness of x increases as Sq(x\L) decreases. 
When 8q(x\1(x)) = n/2, there might be an algorithm A 
of length n/2 that creates x or there might be a mix of 
randomness and determinism for creating x. We are not 
sure. 

We say that x is c-random when Sq(x\L) < c. If a; is 
0-random and n is large, we are very confident that there 
is no deterministic algorithm A that creates x on input 
n (unless the length of A is at least as long as x itself). 
If there is no deterministic algorithm A shorter than x 
which creates x on input n, then x is random. If n is 
large and x is random, then we can be confident that a 
quantum random number generator that generates x is 
truly random. 

We now discuss the main result of this letter: that it 
is impossible to prove that the outcome of a quantum 
measurement is random. 



Consider proving that the outcome of a quantum mea- 
surement is random. To prove that the outcome of a 
quantum measurement is random, we need to show that 
when n is large there is a proof that a string x generated 
by a quantum random number generator is 0-random. 
To prove that the quantum random number generator is 
truly random, one should take n as large as possible and 
prove that x = x\X2 ■ ■ ■ x n is 0-random. To prove that x 
is 0-random, we need to prove that C(x\l(x)) > n — 1. 
We will show that x cannot be proved to be 0-random 
when n is very large because there is an integer N such 
that there is no proof that C(y\l(y)) > N for any string 

y 1- 

We now prove the main result. We prove that there is 
no proof that the outcomes quantum measurements are 
random i.e. we prove that there exists N such that there 
is no proof that C(x\l(x)) > N for any x. 

Let us fix N. Let x N be a string such that there exists 
a proof P N such that C(x N \l(x N )) > N (please note that 
x N and P N might not exist). The Church-Turing thesis 
says that any reasonable calculation can be made 
by a computer. If the proof P N exists then there exists a 
computer program which can implement P N and prove 
that C(x N \l(x N )) > N. 

On input N, a computer program T" can search for a 
string x N and a proof P N such that C(x N \l(x N )) > N 
in the same way that the computer program T searched 
for A above. Some of the proofs P N that there is a 
string x such that C(x N \l(x )) > N might go round 
in circles and not halt so each proof P N is tried for a 
finite but increasing number of steps. A proof halts in a 
finite number of steps so some proof P N will be found if 
it exists. 

In the first step, T' tries all proofs P N of length 1 
for 1 step and all strings x N of length 1 to see if P N 
proves that C(x N \l(x N )) > N. In the ith step, T tries 
all proofs P N of length 1 and all strings x N of length 1 
to see if P N proves C(x N \l(x N )) > N in i steps, T' tries 
all proofs P N of length 2 and all strings x N of length 2 
to see if P N proves C(x N \l(x N )) > N in i — 1 steps, . . ., 
T" tries all proofs P N of length i and all strings x N of 
length i to see if P N proves C(x N \l(x N )) > N in 1 step. 
If T" finds a proof P N and a string x N such that P N 
proves that C(x N \l(x N )) then T' outputs x N and halts. 

C(x N \l(x N )) is defined to be the length of the shortest 
description of x N given l(x N ) as input in the fixed uni- 
versal programming language. T 1 outputs x N on input 
N so T' and N together form a description of x N in the 
universal programming language. T' is independent of N 
and x N so the length of describing T" and N is log(N)+c 



bits where c is a constant independent of N and y N . 
the definition of C(x N \l(x N )) we have 

C(x N \l(x N )) <log(A) + c. 
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However, by definition of T', we have 

C(x N \l(x N )) > N . 

Putting these two inequalities together we have 

log(iV) + c < N 

where c is a constant independent of N. There is a limit 
on the size of N that satisfies this last inequality. Thus 
we have proved our main result. 

CONCLUSIONS 

We have shown that it is impossible to prove that ran- 
domness exists in quantum mechanics. This is a funda- 
mental result. Here are some ideas for future research. 

Quantum cryptography is a commercial application of 
quantum mechanics It might be impossible to prove 
that some of the quantum cryptography protocols are se- 
cure if they rely on the outcomes of measurements being 
random. 

The main result of this letter is an application of 
Kolmogorov complexity. Kolmogorov complexity has 
many applications from pure mathematics [1 81 ] to physics 
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Li and Vitanyi [H| review the current applica- 
tions of Kolmogorov complexity. Kolmogorov complexity 
has already been applied to quantum com put ation and 
generalized to quantum mechanics 13, 21-4^]. An av- 
enue for future research is to find more applications of 
Kolmogorov complexity to quantum computation and to 
find more applications of the quantum generalizations of 
Kolmogorov complexity. 

In this letter, we have assumed that any hidden algo- 
rithm for creating the results of quantum measurements 
can be performed by a computer. Some might believe 
that this assumption might not be correct. 

Collectives generated by nature, as pos- 
tulated by von Mises, may very well satisfy 
stricter criteria of randomness. Why should 
collectives generated by quantum mechanical 
phenomena care about mathematical notions 
of computability? Again, satisfaction of all 
effectively testable prerequisites for random- 
ness is some form of regularity. Maybe na- 
ture is more lawless than adhering strictly to 
regularities imposed by thestatistics of ran- 
domness. [Li and Vitanyi] [H[ 

The Copenhagen interpretation explicitly states that 
when a quantum state is measured, the state collapses 
randomly onto one of the possible outcomes of the mea- 
surement. We have shown that it is impossible to con- 
firm that this collapse is random, thus the main result of 
this letter might favour other interpretations of quantum 



mechanics. There is still scope for new classes of inter- 
pretations of quantum mechanics 4l| which this letter 
might motivate. 
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